This issue has been created
There is 1 update.
 
 
Trusted authentication framework / cid:jira-generated-image-avatar-90176d5b-1938-4b2c-91f5-9d7090a0759c TRUSTAUTH-41 Open

User reference in group stored with full reference even if it's not needed

 
View issue   ·   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-2e5562ab-09d9-436f-b8d3-d4d20fe94250 Josué Tille created this issue on 21/Oct/26 17:43
 
Summary: User reference in group stored with full reference even if it's not needed
Issue Type: cid:jira-generated-image-avatar-90176d5b-1938-4b2c-91f5-9d7090a0759c Bug
Affects Versions: 1.9.9
Assignee: Unassigned
Components: API
Created: 21/Oct/26 17:43
Priority: cid:jira-generated-image-static-major-2a3422ac-43bb-4a5b-b6e2-46f2101c8412 Major
Reporter: Josué Tille
Description:

Step to reproduce:

  • Create a sub-wiki
  • Call org.xwiki.contrib.authentication.internal.DefaultUserManager#addToGroup from the sub-wiki with a group on the main wiki and with a user reference which is in the main wiki.

Expected:
As the group and the user are in the main wiki the reference stored would be something like XWiki.Userx.

Currently:
As the serializer have in the context the sub-wiki the user reference contains the wiki part and so it's stored like xwiki:XWiki.Userx. And even worse if the context changed, we can have the user duplicated because have the variant stored into the XWikiGroup object.

 
 

1 update

 
cid:jira-generated-image-avatar-2e5562ab-09d9-436f-b8d3-d4d20fe94250 Changes by Josué Tille on 21/Oct/26 17:43
 
Assignee: Josué Tille